Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Cisco 300-215 Exam - Topic 6 Question 102 Discussion

Refer to the exhibit.What is occurring within the exhibit?
B) Host 209.141.51.196 redirects the client request from /Lk9tdZ to /files/1.bin.
A) Source 10.1.21.101 sends HTTP requests with the size of 302 kb.
C) Host 209.141.51.196 redirects the client request to port 49723.
D) Source 10.1.21.101 is communicating with 209.141.51.196 over an encrypted channel.

Cisco 300-215 Exam - Topic 6 Question 102 Discussion

Actual exam question for Cisco's 300-215 exam
Question #: 102
Topic #: 6
[All 300-215 Questions]

Refer to the exhibit.

What is occurring within the exhibit?

Show Suggested Answer Hide Answer
Suggested Answer: B

The Wireshark capture shows a series of HTTP requests and responses:

The client (10.1.21.101) sends a GET request for /Lk9tdZ.

The server (209.141.51.196) responds with HTTP/1.1 302 Found, which is a standard HTTP status code indicating a redirection.

The subsequent GET request from the client is for /files/1.bin, which indicates it followed the redirect.

This behavior confirms that the server is issuing an HTTP 302 redirect from the initial request path /Lk9tdZ to /files/1.bin. This is often observed in malware command-and-control behavior or file download staging.

Option A is incorrect: 302 is a status code, not a data size.

Option C is incorrect: port 49723 is a source/destination ephemeral port, not a redirect target.

Option D is incorrect: communication is over HTTP, not HTTPS (which would indicate encryption).


Contribute your Thoughts:

0/2000 characters
Herman
9 months ago
Definitely not option D, no encryption mentioned here.
upvoted 0 times
...
Edelmira
9 months ago
I think it's option B, that makes the most sense.
upvoted 0 times
...
Yasuko
9 months ago
Wait, are we sure about the size of those HTTP requests?
upvoted 0 times
...
Mary
9 months ago
I thought redirects only happened on specific ports, this is interesting!
upvoted 0 times
...
Kip
9 months ago
Looks like 209.141.51.196 is doing some redirects.
upvoted 0 times
...
Rosita
10 months ago
I don't think it's about encryption; I remember we discussed that in a different context.
upvoted 0 times
...
Keena
10 months ago
I’m a bit confused about the ports. Wasn't there a question about port redirection in our last practice session?
upvoted 0 times
...
Mel
10 months ago
I feel like option B sounds familiar; I practiced a question where a host redirected a request, but I can't recall the specifics.
upvoted 0 times
...
Mary
10 months ago
I think I remember something about HTTP requests, but I'm not sure if the size is relevant here.
upvoted 0 times
...
Allene
11 months ago
Okay, I see the source IP, destination IP, and some request/response details. I think I can use that information to deduce the right answer here.
upvoted 0 times
...
Lillian
11 months ago
Hmm, the question is asking what's occurring, so I'll need to pay close attention to the specific details like the URL paths and port numbers to figure out the correct answer.
upvoted 0 times
...
Elli
11 months ago
The exhibit shows some HTTP request and response information, so I think the key is to understand the flow of traffic between the source and destination hosts.
upvoted 0 times
...
Trinidad
11 months ago
This looks like a network traffic analysis question. I'll need to carefully examine the details in the exhibit to determine what's happening.
upvoted 0 times
...
Rickie
11 months ago
Haha, looks like the server is playing a game of hide-and-seek with the client! Option B is the winner here.
upvoted 0 times
...
Hayley
11 months ago
I'm not sure, but I think the answer might be C) Host 209.141.51.196 redirects the client request to port 49723.
upvoted 0 times
...
Alesia
1 year ago
I agree with Winfred, it looks like a redirection happening in the exhibit.
upvoted 0 times
...
Winfred
1 year ago
I think the answer is B) Host 209.141.51.196 redirects the client request from /Lk9tdZ to /files/1.bin.
upvoted 0 times
...
Arlyne
1 year ago
The client is being redirected from /Lk9tdZ to /files/1.bin, so option B seems correct.
upvoted 0 times
...

Save Cancel